{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Check Point VPN gateway arbitrary file read (CVE-2024-24919) exploited · updates",
  "home_page_url": "https://pwn.watch/i/check-point-quantum-gateway-info-disclosure-cve-2024-24919",
  "feed_url": "https://pwn.watch/i/check-point-quantum-gateway-info-disclosure-cve-2024-24919/feed.json",
  "description": "Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances. Added to the CISA KEV catalog on 2024-05-30. CISA lists known use in ransomware campaigns.",
  "language": "en",
  "_pwn": {
    "slug": "check-point-quantum-gateway-info-disclosure-cve-2024-24919",
    "severity": "high",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/check-point-quantum-gateway-info-disclosure-cve-2024-24919/feed.xml",
    "llms": "https://pwn.watch/i/check-point-quantum-gateway-info-disclosure-cve-2024-24919/llms.txt",
    "json": "https://pwn.watch/i/check-point-quantum-gateway-info-disclosure-cve-2024-24919.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/check-point-quantum-gateway-info-disclosure-cve-2024-24919#2024-05-30-2b8ce4b9",
      "url": "https://pwn.watch/i/check-point-quantum-gateway-info-disclosure-cve-2024-24919#2024-05-30-2b8ce4b9",
      "title": "Check Point VPN gateway arbitrary file read (CVE-2024-24919) exploited: CISA added CVE-2024-24919 to the KEV catalog (federal deadline 2024-06-20)",
      "content_text": "Check Point VPN gateway arbitrary file read (CVE-2024-24919) exploited: CISA added CVE-2024-24919 to the KEV catalog (federal deadline 2024-06-20)\n\nSource: https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "date_published": "2024-05-30T00:00:00.000Z",
      "external_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/check-point-quantum-gateway-info-disclosure-cve-2024-24919#2024-05-28-5f9098bd",
      "url": "https://pwn.watch/i/check-point-quantum-gateway-info-disclosure-cve-2024-24919#2024-05-28-5f9098bd",
      "title": "Check Point VPN gateway arbitrary file read (CVE-2024-24919) exploited: CVE-2024-24919 published",
      "content_text": "Check Point VPN gateway arbitrary file read (CVE-2024-24919) exploited: CVE-2024-24919 published\n\nSource: https://nvd.nist.gov/vuln/detail/CVE-2024-24919",
      "date_published": "2024-05-28T00:00:00.000Z",
      "external_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24919",
      "tags": [
        "high"
      ]
    }
  ]
}